Full Disclosure: by author

24 messages starting Aug 29 20 and ending Aug 11 20
Date index | Thread index | Author index


b1nary

SUPERAntiSpyware Professional X Trial < 10.0.1206 Local Privilege Escalation b1nary (Aug 29)

Benjamin Floyd

Google Chromecast Auth Bypass/RCE Benjamin Floyd (Aug 25)

Bhdresh

Re: [FD] ManageEngine ADSelfService Plus – Unauthenticated Remote Code Execution Vulnerability Bhdresh (Aug 11)
ManageEngine ADSelfService Plus – Unauthenticated Remote Code Execution Vulnerability Bhdresh (Aug 07)

Egidio Romano

SugarCRM < 10.1.0 (Reports Export) SQL Injection Vulnerability Egidio Romano (Aug 11)
SugarCRM < 10.1.0 Multiple Reflected Cross-Site Scripting Vulnerabilities Egidio Romano (Aug 11)

ghost

NEProfile - Host Header Injection ghost (Aug 25)

hyp3rlinx

CVE-2020-24548 / Ericom Access Server for (AccessNow & Ericom Blaze) v9.2.0 / Server Side Request Forgery hyp3rlinx (Aug 25)

Jack Misiura via Fulldisclosure

Payment bypass in WordPress - WooCommerce - NAB Transact plugin disclosure Jack Misiura via Fulldisclosure (Aug 21)

Open-Xchange GmbH via Fulldisclosure

Open-Xchange Security Advisory 2020-08-20 Open-Xchange GmbH via Fulldisclosure (Aug 21)

Ostovary, Daniel

Missing Trust Validation in Visual Studio's VSIX Installer Ostovary, Daniel (Aug 29)

Pietro Oliva via Fulldisclosure

Avian JVM vm::arrayCopy() Multiple Integer Overflows Pietro Oliva via Fulldisclosure (Aug 11)
Avian JVM vm::arrayCopy() silent return on negative length Pietro Oliva via Fulldisclosure (Aug 11)

psy

New Release: UFONet v1.6 - "M4RAuD3R!"... psy (Aug 17)

Q C

Two vulnerabilities found in MikroTik's RouterOS Q C (Aug 14)
Three vulnerabilities found in MikroTik's RouterOS Q C (Aug 29)

Red Timmy Security

A Tale of Escaping a Hardened Docker container Red Timmy Security (Aug 25)

Sebastian Auwärter

[SYSS-2020-029]: Jira module "Gantt-Chart for Jira" - Improper Privilege Management (CWE-269)(CVE-2020-15943) Sebastian Auwärter (Aug 04)
[SYSS-2020-030]: Jira module "Gantt-Chart for Jira" - Cross-Site Scripting (CWE-79)(CVE-2020-15944) Sebastian Auwärter (Aug 04)

SEC Consult Vulnerability Lab

SEC Consult SA-20200826-0 :: Extensive file permissions on service executable in Eikon Thomson Reuters SEC Consult Vulnerability Lab (Aug 27)
SEC Consult SA-20200827-0 :: Multiple Vulnerabilities in ZTE mobile Hotspot MS910S SEC Consult Vulnerability Lab (Aug 27)
SEC Consult SA-20200807-0 :: Multiple Vulnerabilities in flatCore CMS SEC Consult Vulnerability Lab (Aug 07)

Sivanesh Ashok

October CMS <= Build 465 Multiple Vulnerabilities - Arbitrary File Read Sivanesh Ashok (Aug 04)

Zenofex via Fulldisclosure

Remote Code Execution 0day in vBulletin 5.x Zenofex via Fulldisclosure (Aug 11)